Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa
File:                     78a31b0d-31cf-3e0d-a904-45f0a490530a.roa (raw, json)
Hash identifier:          IhB2LSY8iocCi9pFkYjCiuK4cqFg3TU5hdR5KCxr0uU=
Subject key identifier:   25:F6:DF:0A:4B:A0:40:7B:3E:5B:94:4B:E8:A4:4B:F5:A5:9D:DF:7F
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584A1465656CBDC1F8A92B133110
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        172.82.212.0/24 maxlen: 24
                          172.82.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:65:6c:bd:c1:f8:a9:2b:13:31:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=5c60f61d-09bf-4dd7-8284-39127d3ee60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:0a:b8:7d:c9:2e:a9:1e:9d:2d:6c:b0:7d:
                    43:a6:bd:9e:d1:a0:06:1e:b9:53:94:3b:d9:3a:b9:
                    4f:b1:04:e4:b7:04:93:20:c7:1d:0a:4f:9b:d6:39:
                    a1:ee:88:4b:53:75:ac:1c:02:1f:ca:92:bc:fe:ab:
                    d3:73:4a:f8:c5:60:e0:cb:77:76:5f:43:80:f5:0c:
                    94:4e:93:f4:54:cc:eb:95:dd:3a:76:30:97:f8:94:
                    87:44:2a:c1:a1:5e:ef:b7:6f:17:b2:69:9b:f2:36:
                    d5:ac:78:47:14:79:90:6f:54:46:f5:51:2b:0a:16:
                    75:2e:a1:a5:84:f4:56:dd:58:c8:9b:ee:bb:78:ec:
                    6a:e5:24:cc:03:db:dc:da:c5:e4:64:1b:da:80:a1:
                    d2:36:a4:b5:b8:dc:c5:d4:27:2a:64:07:f9:53:8d:
                    d8:ec:9d:83:61:63:d2:7f:b9:78:2f:15:9e:e7:d2:
                    48:5e:ed:f1:11:d4:42:d3:19:ba:d2:70:87:d5:8e:
                    8b:8a:9a:14:6b:44:32:17:30:f8:4c:d3:96:2b:05:
                    df:c9:d2:81:da:6e:72:49:8c:ed:ae:6f:13:48:fe:
                    6c:84:35:58:83:ca:20:89:df:ce:41:55:8a:90:fa:
                    3e:f9:f3:e1:32:82:b9:2f:3f:33:f1:bd:17:6e:10:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F6:DF:0A:4B:A0:40:7B:3E:5B:94:4B:E8:A4:4B:F5:A5:9D:DF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/78a31b0d-31cf-3e0d-a904-45f0a490530a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.212.0/24
                  172.82.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1b:96:3c:49:77:12:77:41:f6:4c:06:84:3b:7d:92:10:4a:
         36:82:32:b6:c5:fe:09:39:b5:d5:a5:07:a5:75:7f:4c:c8:ed:
         e0:61:c0:46:a5:f1:b9:ef:76:7a:f2:48:62:ad:b8:99:db:46:
         89:f4:63:22:05:9f:a9:b4:99:1c:f3:bc:95:b6:00:55:15:3f:
         4d:ea:4e:e7:0e:ab:d7:fa:79:e9:75:c1:70:dd:22:85:8d:79:
         21:e6:2b:07:6c:25:a5:93:24:09:4f:97:92:a4:d6:45:6a:cc:
         90:80:ec:5b:b8:98:86:3e:b8:a4:c2:27:c5:1e:03:d2:6e:80:
         ef:47:22:32:7b:86:b8:3d:d7:2b:11:18:f1:07:49:2c:59:80:
         50:dc:37:7b:ea:cd:31:96:4c:5d:99:6f:42:ad:84:09:a9:9f:
         49:dc:71:6a:68:04:7f:9e:d0:62:f9:b7:ea:fd:0f:67:6d:d5:
         88:08:86:d4:d6:35:1e:f7:9e:2c:b2:e4:b0:55:7c:e7:9a:e3:
         e4:94:17:21:03:ea:58:36:62:8e:eb:1b:6a:37:34:be:54:e0:
         11:6d:27:43:f0:57:56:47:f5:e8:77:07:3e:40:d1:60:4c:7d:
         bb:cc:cc:fd:d8:41:09:61:7d:e1:a7:94:6e:16:60:92:5d:f2:
         c2:1b:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:27 2025 by rpki-client